Maven/com.vaadin:flow-gradle-plugin CVE-2026-7860: low 1.6, EPSS 0.12%
Vaadin Build Plugins is Affected by a Possible Information Disclosure Vulnerability
Action: Upgrade com.vaadin:flow-gradle-plugin to 24.9.18 (24.9.x), 24.10.4 (24.10.x), 25.0.12 (25.0.x) or 25.1.5 (25.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 24.0.0 | 24.9.18 | - |
| 24.10.0 | 24.10.4 | - |
| 25.0.0 | 25.0.12 | - |
| 25.1.0 | 25.1.5 | - |
Fixed versions
| 24.9.18 | 24.10.4 | 25.0.12 | 25.1.5 |
Sources
- osv: GHSA-j8mx-j73w-9mxw#Maven/com.vaadin:flow-gradle-plugin
- nvd: CVE-2026-7860
- https://github.com/vaadin/flow/pull/24219
- https://github.com/vaadin/flow
- https://vaadin.com/security/cve-2026-7860
CVE-2026-7860 · published · modified · JSON